Lead, System Security

Stelle nicht auf LinkedIn

🕒 vor 8 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $144.122 - $240.204 / Jahr

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

👻 Geisterscore 0%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Slate Auto

WebsiteLinkedInAlle Stellen

201 - 500 Mitarbeiter

🚘 Automobilindustrie

🏭 Fertigung

🚗 Transport

Automotive • Manufacturing • Transport

Slate ist eine SaaS-Plattform für die Erstellung von Inhalten, die speziell für Social-Media-Teams und Marken entwickelt wurde. Sie bietet einen schnellen, leichtgewichtigen Editor und mobile Apps zur Erstellung von Video- und Bildinhalten, die für soziale Medien optimiert sind. Außerdem gibt es ein Brand Hub zur Verwaltung von Assets, Vorlagen, Teams, Kampagnen und Unternehmens-Markenrichtlinien. Slate ist darauf ausgelegt, Marketing- und Social-Teams dabei zu unterstützen, markengerechte, algorithmusfreundliche Inhalte schnell und in großem Umfang zu produzieren.

Beschreibung

• Define Slate's cybersecurity strategy, multi-year roadmap, risk-based priorities, security policy framework, risk register, and governance model • Report security posture and risk to the CTO, executive team, and board • Own the security budget • Lead compliance and regulatory readiness across SOX IT general controls, NIST CSF 2.0, ISO 27001, PCI-DSS, CCPA and state privacy laws, NIST 800-171, CMMC, and export control obligations • Own audit readiness, evidence collection, and remediation tracking • Recruit, lead, and develop the security team • Run security awareness and training programs • Establish vehicle and product cybersecurity capabilities, including TARA, secure over-the-air updates, telematics and backend security, key and certificate management, and supplier cybersecurity requirements • Establish product security incident response and coordinated vulnerability disclosure programs • Embed security into the SDLC across consumer web, ecommerce, mobile, B2B integrations, and internal applications • Set standards for threat modeling, secure code review, SAST/DAST, dependency and secrets management, and cloud security posture across AWS, Azure, and edge platforms • Drive penetration testing and remediation prioritization • Secure ERP, WMS, procurement, warranty, and other enterprise platforms • Own role design, segregation of duties, privileged access, and access reviews • Establish an OT security program for the Warsaw plant and future sites aligned to IEC 62443 • Own identity and access management, endpoint and email security, vulnerability management, and corporate security architecture • Define data classification, retention, protection standards, privacy-by-design controls, and safe-use controls for AI and LLM tools • Own detection, response, threat intelligence, incident response planning, crisis communications, legal coordination, and regulatory notification • Establish a third-party and supply-chain security risk program • Partner across Technology, vehicle engineering, manufacturing, legal, compliance, finance, internal audit, supply chain, and customer care

🎯 Anforderungen

• 10 or more years in information security or cybersecurity • At least 5 years leading security teams or programs • Experience building or substantially maturing a security program across multiple domains • Hands-on leadership of compliance efforts against SOX IT general controls and at least one of ISO 27001, NIST CSF, SOC 2, or NIST 800-171 • Experience with real audits and certifications • Direct experience securing manufacturing, industrial, or OT environments, or strong working knowledge of IEC 62443, OT network segmentation, and production-floor realities • Solid technical grounding in cloud security, identity and access management, application security, and security operations • Ability to evaluate architecture and challenge vendors • Track record of translating risk into business terms and making pragmatic, prioritized tradeoffs • Strong written and verbal communication, including presenting to executives and boards • Low-ego, collaborative approach to working across departments • Applicants must be authorized to work in the United States on a permanent basis • Automotive, EV, or connected product security experience, including ISO/SAE 21434, UN R155/R156, or a Cybersecurity Management System (preferred) • Experience standing up security for a greenfield plant, a new company, or a rapidly scaling business (preferred) • Consumer ecommerce and payments security, including PCI-DSS scoping and consumer privacy regulations (preferred) • Experience with CMMC, ITAR/EAR, or government and defense contracting requirements (preferred) • Familiarity with securing data platforms and AI/ML or LLM-based applications (preferred) • Industry certifications such as CISSP, CISM, GICSP, or CCSP (preferred) • Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience (preferred)

🏖️ Vorteile

• Medical insurance • Dental insurance • Vision insurance • Life insurance • Disability insurance • Vacation • 401k • Equity program eligibility • Discretionary annual incentive program eligibility • Reasonable accommodation for qualified individuals with disabilities